GDPR Policy

1. Introduction

France Export ("Company", "we", "us", or "our") is committed to protecting the personal data of our customers, clients, employees, and business partners. This policy outlines our approach to data protection and compliance with the General Data Protection Regulation (GDPR) and describes the measures we take to ensure that personal data is collected, processed, and stored lawfully, fairly, and transparently.

2. Scope

This policy applies to all personal data collected, processed, and stored by France Export, whether electronically or in paper form, and to all employees, contractors, and business partners with access to personal data.

3. Definitions

Personal Data: Any information relating to an identified or identifiable natural person.
Processing: Any operation or set of operations performed on personal data, such as collection, storage, modification, retrieval, disclosure, or destruction.
Data Subject: An identified or identifiable natural person whose personal data is processed by the Company.
Data Controller: The entity that determines the purposes and means of processing personal data.
Data Processor: The entity that processes personal data on behalf of the Data Controller.

4. Legal Basis for Processing

France Export processes personal data based on one or more of the following legal bases:

Consent: Data subjects have given their consent to the processing of their personal data for a specific purpose.
Contractual Obligation: Processing is necessary for the performance of a contract to which the data subject is a party.
Legal Obligation: Processing is required to comply with a legal obligation.
Legitimate Interest: Processing is necessary for the legitimate interests of the Company, provided that such interests do not override the data subject's rights.

5. Data Collection and Use

France Export collects and processes personal data only for specific, explicit, and legitimate purposes. We collect only the minimum amount of personal data necessary to achieve these purposes. Personal data is used only for the purpose for which it was collected, unless further processing is compatible with the original purpose.

6. Data Subject Rights

Data subjects have the following rights under GDPR:

Right to Access: The right to obtain confirmation of whether their personal data is being processed and to request access to their data.
Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
Right to Erasure ("Right to Be Forgotten"): The right to request the erasure of their personal data under specific circumstances.
Right to Restrict Processing: The right to request a restriction on the processing of their personal data under specific circumstances.
Right to Data Portability: The right to receive their personal data in a structured, commonly used, and machine-readable format and to transmit that data to another Data Controller.
Right to Object: The right to object to processing based on legitimate interests or direct marketing.

7. Data Security

France Export implements appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or destruction. These measures include data encryption, access controls, and regular data security audits.

8. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by law. France Export has a data retention policy that defines the retention periods for different categories of personal data.

9. Data Transfers

France Export ensures that any transfer of personal data to a third country or international organization is conducted in compliance with GDPR. Data is transferred only to countries with adequate data protection levels or with appropriate safeguards in place.

10. Contact Information

If you have any questions or concerns about our GDPR policy or data protection practices, please contact our Data Protection Officer.